Setting Tacacs+ Outbound Password For A User - Cisco 2509 - Router - EN User Manual

Advanced User Authentication Settings
Step 2
Step 3

Setting TACACS+ Outbound Password for a User

User Guide for Cisco Secure ACS for Windows Server
7-36
Do one of the following:
To use the information configured in the Password Authentication section,
•
select Use CiscoSecure PAP password.
Note For information about basic password setup, see
Account, page
To use an external database password, select Use external database
•
password, and then choose from the list the database that authenticates the
enable password for this user.
The list of databases displays only the databases that you have
Note
configured. For more information, see
Databases, page
• To use a separate password, click Use separate password, and then type and
retype to confirm a control password for this user. This password is used in
addition to the regular authentication.
Do one of the following:
If you are finished configuring the user account options, click Submit to
•
record the options.
To continue to specify the user account options, perform other procedures in
•
this chapter, as applicable.
The TACACS+ outbound password enables a AAA client to authenticate itself to
another AAA client via outbound authentication. The outbound authentication
can be PAP, CHAP, MS-CHAP, or ARAP, and results in the Cisco Secure ACS
password being given out. By default, the user ASCII/PAP or
CHAP/MS-CHAP/ARAP password is used. To prevent compromising inbound
passwords, you can configure a separate SENDAUTH password.
Chapter 7 Setting Up and Managing User Accounts
7-5.
11-4.
Adding a Basic User
About External User
78-14696-01, Version 3.1